Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: MCAg/WWxzcYfe5us49S+US1V7fo5+PPCCFJ9OCGDqqs=
Subject key identifier: 3D:24:3A:55:17:07:CF:F1:3F:E2:D4:E6:09:C6:E9:D2:27:C8:FE:91
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 0194BCE0CB57FF8A31ED9B4F1038139E51E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
2: buQG-wtVNpUrPJ_2t7dekqYzUho.roa (hash: AC4DBN7YxMjhR0VzHY+/cw0VJl+DFBoERdFnKk3z5Ac=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: ZOTo+K+u9X/vHbtKSHluhrHeHb7gsCarZwTnCmySUdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:57:ff:8a:31:ed:9b:4f:10:38:13:9e:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=3d243a551707cff13fe2d4e609c6e9d227c8fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:70:8e:92:15:24:d8:f0:1e:7b:d6:b5:5f:
c3:66:8b:24:d9:82:8f:2a:7a:72:08:b6:7d:fc:ea:
21:8d:23:f8:79:b7:50:4e:4c:3c:01:70:1c:01:ac:
cd:7d:05:32:24:aa:1e:c6:60:8f:06:1e:31:9a:b4:
f3:01:02:e1:3a:ed:dc:b7:5b:0e:fb:57:3d:85:20:
10:53:d2:7b:75:c7:8a:9b:3b:c8:e7:c4:73:79:35:
65:ef:7b:a6:2b:70:78:4d:40:d5:6f:83:b8:47:d0:
dc:b4:70:6c:c9:26:57:fb:90:6c:f6:64:de:0a:c1:
c3:3c:da:ec:e6:ca:98:84:6c:aa:db:67:ed:d8:94:
6d:fe:52:fe:0b:cf:22:d5:bb:1c:37:d4:5c:42:ab:
eb:2f:c5:ad:8a:d2:e3:ed:1c:7e:ec:31:f6:50:d6:
a3:84:36:2d:2a:3a:c3:3a:dd:cb:cf:06:bf:c9:c1:
94:0e:1a:e1:6e:e0:20:84:07:ae:35:5b:ac:09:0f:
52:53:37:c7:e1:59:3f:27:35:2e:7c:2d:34:10:e7:
d7:64:d8:83:6b:cb:32:b7:fa:f1:46:05:58:56:f1:
fd:cf:d8:da:cb:45:41:46:57:d0:9a:cc:08:36:8b:
3e:ca:3b:ef:c3:46:3e:5f:a3:6d:97:85:8b:c3:13:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:3A:55:17:07:CF:F1:3F:E2:D4:E6:09:C6:E9:D2:27:C8:FE:91
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4b:f2:50:c4:2d:59:8d:5a:18:00:f9:4f:ba:49:5b:ad:b1:
ae:27:4d:5a:13:55:a1:8c:07:bd:cf:a0:48:8f:fc:f9:9f:77:
d9:5c:38:68:d9:2b:8e:a5:75:4f:89:60:b6:95:eb:88:37:16:
c2:74:3a:5d:fd:59:ef:5e:22:d8:ee:4f:79:c8:9e:b9:14:1f:
65:39:64:e0:11:9e:1d:8a:ea:1e:f8:51:a8:55:d2:3f:fc:73:
b3:22:ca:40:eb:7c:d9:1a:52:76:90:3f:f0:9c:6a:89:f7:d8:
7d:4c:b3:05:ad:c2:f8:c6:4e:2e:9c:cb:86:10:ed:a2:0a:d2:
6d:1e:47:56:73:38:f8:36:28:76:b5:45:f5:51:15:2e:4b:42:
c4:dd:ef:47:f2:72:54:39:32:f8:43:ad:9f:6c:96:83:b4:8e:
7e:b6:83:e1:b3:0a:bf:18:e0:14:e3:5e:8c:b7:23:14:35:28:
27:c2:6b:f9:32:5b:d7:91:ae:69:aa:ec:88:1a:95:98:84:4d:
df:5f:57:3b:41:4d:52:02:fa:a0:8b:5f:d1:93:61:69:39:bf:
c8:01:fc:6b:49:2b:b8:51:29:ba:b0:aa:64:6d:82:19:0b:df:
4b:dc:46:2c:ba:a8:33:7a:8f:ef:99:4e:c5:59:77:a1:af:74:
b6:9e:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:25 2025 by rpki-client